critical9.8
CVE-2018-18427
s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member/member_login.php.
Impact
s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member/member_login.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| S-Cms | S-Cms | Version 3.0 |